Which of the following is true of auditing in Windows?

Question $8$ options:

Auditing is primarily a preventive security control.

In the context of access control, auditing makes a record of desired, allowed, and denied$-$access requests.

In order to collect access control auditing information, auditing itself must be disabled.

Because Windows stores audit event notes in event logs$,$ a special utility is required to view the information and determine what has occurred on Windows computers.